Change Details

An attacker with "Create Repository" permission can theoretically access repositories they are not permitted to view by creating a repository with the same local path as another repository.

This is no longer a security issue, but it would still be vaguely nice to prevent several repositories from being mapped to the same local path. Nothing good can ever come of such a setup. --- //Previously...// > An attacker with "Create Repository" permission can theoretically access repositories they are not permitted to view by creating a repository with the same local path as another repository.

This is no longer a security issue, but it would still be vaguely nice to prevent several repositories from being mapped to the same local path. Nothing good can ever come of such a setup. --- //Previously...// > An attacker with "Create Repository" permission can theoretically access repositories they are not permitted to view by creating a repository with the same local path as another repository.